Privacy notice
Version 1.1. Last updated 29 October 2026.
This notice explains what URLiG handles when you use urlig.com: when you create, open or check a short link, view its stats, click a sponsored banner, report a link or contact us. It also covers why we use that information, who receives it, how long we keep it and how you can exercise your rights.
1. Who we are and how to reach us
URLiG runs the service at urlig.com and decides how the information described here is used. For privacy questions and requests, email boss@urlig.com. To report a harmful link, use Report a link or email abuse@urlig.com.
2. In short
- Creating a link needs no account, name, email address or payment details.
- We handle the URL you submit and the technical data needed to run and protect the redirect.
- Opening a link creates a click record that can include IP address, time, device, browser, referring page and approximate location.
- After a link's first 30 clicks, visitors may see a checkpoint page with sponsored banners before they continue.
- Sponsored banners are served from
urlig.com. An advertising partner receives data only if you click a banner. - We see how pages are used with Cloudflare Web Analytics and Microsoft Clarity. Neither sets cookies on URLiG, and Clarity masks anything typed into a field.
- We do not set advertising or analytics cookies, and we do not sell personal information.
- Server access logs are kept for six months. Other periods are listed in section 11.
3. What we handle
When you create a link
We receive the destination URL, create the short code and short URL, and record the date and time together with technical request data such as IP address, browser, operating system and approximate location derived from the IP address. The destination may contain affiliate IDs, UTM tags or other values that you or a third party added. Do not put passwords, tokens, keys, identity numbers, card details or other sensitive information into a URL.
When someone opens a link
The redirect can record the date and time, IP address, browser, operating system, device type, approximate location, the destination and the referring page when the browser sends it. Security and rate-limit signals may also be generated. A click describes a request to the short link, not necessarily the person who created it: it can come from a visitor, an automatic preview, a security scanner or another system.
When you view stats
Adding + to the end of a short link shows its statistics: the total number of clicks and, where available, referring sources and approximate location. Anyone who has the short link can open this page. The figures are aggregated, but the logs behind them can be personal information while they can still be linked to someone.
When you see or click a sponsored banner
Banners on the checkpoint, warning and blocked-link pages are served from urlig.com. To decide which banner to show, the page asks Cloudflare for the country of the request; we do not store it with the click. Visitors from the United States and its territories do not see gambling banners. A gambling banner links to an advertising partner's tracking link. If you click it, your browser connects to that partner, which receives the technical data the browser sends (such as IP address, browser and referring page) and a label that tells it which banner and position were clicked. The partner then chooses where to send you. From that moment the partner's privacy notice applies.
When you check a link
On Check a link, our server follows the redirect path of the address you enter and shows where it leads. We process that address and the technical data of your request to return the result and to limit automated use.
When you report a link or contact us
We handle the information you send: the reported URL, the reason and description, or your message and the topic you choose, plus the email address if you give one, the date and time, and the technical data needed to deliver and protect the form. An email address is optional for an ordinary report. Formal legal notices may need identification and more detail.
Security check on forms
Forms are protected by Cloudflare Turnstile, which checks that a request comes from a person and not a bot. To do this it processes technical signals from your browser.
4. Why we use information
| Purpose | Main information | Legal basis |
|---|---|---|
| Create the short link and redirect visitors | Destination, short code, technical request data | Providing the service you request |
| Show link statistics | Time, referring source, approximate location, device | Legitimate interest in offering the feature |
| Show sponsored banners that fund the free service | Country of the request, page and banner position | Legitimate interest in funding the service |
| Protect the service against phishing, malware, spam and automated abuse | IP address, URLs, logs, security signals | Legitimate interest and the establishment or defence of legal claims |
| Measure how the site is used, without cookies | Page views, load times, referring page, browser and country, aggregated by Cloudflare Web Analytics; clicks, scrolling, pointer movement and page layout recorded as session replays and heatmaps by Microsoft Clarity, with typed text masked | Legitimate interest in improving the site |
| Answer messages and handle reports | Email address, message, details of the case | Steps you ask us to take, legitimate interest, legal claims |
| Meet legal duties | Information connected with a valid request or order | Legal obligation |
We do not treat agreeing to this notice as consent. If we ever need consent, we will ask for it separately, and you will be able to withdraw it.
5. Clicks, stats and the checkpoint page
A click is recorded on the server when the short address is requested. It is recorded even if the destination never finishes loading, and repeated or automated requests are counted too. A click count is therefore not a count of people, users or analytics sessions.
The first 30 clicks on a link go straight to the destination. After that, a visitor may first see a checkpoint page that shows where the link leads, a basic safety check and sponsored banners. The checkpoint does not change the destination chosen by the person who created the link.
6. Sponsored banners
Banners on URLiG do not load scripts, pixels or cookies from an advertising network. The images, text and fonts come from urlig.com, so nothing is sent to an advertiser while you only look at the page. A partner receives data only when you click a banner, as described in section 3. Banners do not name a particular operator: the partner decides the destination after the click and may change it over time.
Gambling content is for adults only. Do not click a gambling banner if you are under 18 or if gambling is not allowed where you are.
7. Cookies, local storage and analytics
| Category | Provider | Purpose | Duration |
|---|---|---|---|
| Strictly necessary and security | Cloudflare | Deliver the site, apply limits, stop automated abuse, run the Turnstile check on forms | Session, or the period the security function needs |
| Analytics | Cloudflare Web Analytics, Microsoft Clarity | Count page views, measure performance and show how pages are used through session replays and heatmaps | No cookies |
| Advertising | None on URLiG | Not used | Not applicable |
The day or night theme can be switched on the page, but the choice is not stored. You can block or delete cookies in your browser; the shortener will keep working. Websites you reach through a short link or a banner set their own cookies under their own notices.
8. Reports and moderation
Information sent through Report a link is used to assess the report, investigate, decide and, if needed, contact the reporter. Only people who need it for moderation, security or legal review can see it. We do not tell the creator of a link who reported it as part of the normal process.
Destination URLs may be checked with external threat-intelligence services such as Google Safe Browsing. The check is about the address, not about the person who created or reported it.
We may preserve or disclose information when a valid order or a legal duty requires it. A report is not confidential in every circumstance and does not guarantee removal.
9. Who receives information
URLiG does not sell personal information. Others receive it only in these categories:
- Cloudflare: hosting, content delivery, network protection, rate limiting, Turnstile, cookieless web analytics and email routing;
- Microsoft: Clarity session replays and heatmaps, without cookies and with typed text masked;
- our link infrastructure provider: storing short links, performing redirects and producing click statistics;
- threat-intelligence services such as Google Safe Browsing: checking URLs for known threats;
- advertising partner: only when you click a banner, as described in section 3;
- our email provider: delivering form messages, reports and replies;
- professional advisers: legal, accounting, technical or security support when needed;
- authorities: when a valid order or legal obligation requires it.
Each provider receives only what its role requires and is bound by its own terms and legal obligations.
10. International transfers
Our providers may process information outside your country, including in the United States and the European Union. Where the law requires it, transfers rely on recognised safeguards such as adequacy decisions or standard contractual clauses. Locations can change with the provider's network. You can ask us which safeguards apply to your case.
11. How long we keep information
| Information | Period or rule |
|---|---|
| Server access logs, including IP address, date and time | 6 months |
| Session replays and heatmaps in Microsoft Clarity | Replays 30 days, or 9 months for a replay we mark for review; heatmap data 9 months |
| Link between the destination and the short URL | While the link is active |
| Aggregated click statistics | While kept without personal identification |
| Security and rate-limit records | As long as needed to investigate and protect the service, within the access-log period |
| Reports and moderation decisions | As long as needed to assess the report, record the decision, prevent repeat abuse and handle claims |
| Contact messages | As long as needed to answer and keep a record of the exchange |
| Backups | Until the scheduled rotation, unless a legal hold applies |
At the end of the period, information is deleted or anonymised unless we must keep it for a legal obligation, a valid order or a legal claim.
12. Security
We use HTTPS, access controls, rate limits, network protection and URL checks to reduce risk. Logs and form messages are available only to the people and systems that need them. No control removes every risk. If you find a vulnerability, describe it to boss@urlig.com without exploiting it further than needed to show the problem.
13. Your rights
Depending on the law that applies to you, you can ask to access your information, correct it, delete it, restrict or object to its use, receive a copy in a portable format, or withdraw consent where we rely on it. Email boss@urlig.com. Because links are created without an account, an email address alone may not let us find a record. Include the short link, the approximate date and time, and what you did, and we may ask for a reasonable detail to confirm the request is yours.
If we cannot fully meet a request, we will explain the legal reason. You can also complain to the data protection authority in your country.
14. Automated decisions
Technical signals and external lists can flag a URL and lead to a warning or a preventive block. We assess factors such as the destination's reputation, traffic patterns and reports, without publishing thresholds that would help abuse. If a decision seriously affects a legitimate link, its creator can ask for human review at boss@urlig.com.
15. Children
URLiG is not intended for anyone under 18. We do not ask for age because links are created without an account. If we learn that a child has sent us personal information, we will stop using it and delete what we do not need to keep for a legal reason or to protect the child. If a URLiG link targets minors, report it.
16. Other websites and changes
A short link or a banner takes you to an independent website. That website controls its own content and data practices; read its privacy notice before you give it information.
If a security incident creates a risk to people, we will assess it and make the notifications the law requires. We may update this notice when the service, our providers or the law change. Material changes will be published here with a new version number and date.
17. Contact
For privacy questions and requests, email boss@urlig.com. To report abuse, use Report a link or abuse@urlig.com. Use of the service is covered by our Terms of use and House rules.